Training Session - Application Security - SQLi, WebGoat

Currently we have 3 45 minute slots.

One will be on SQL Injection - intro, detection, prevention, scanning and false positives. This is the most serious web application vulnerability.

The second will be on OWASP WebGoat. WebGoat is a deliberately insecure web application maintained by OWASP (http://www.owasp.org/) designed to teach web application security lessons. You can install and practice with WebGoat in either J2EE or in ASP.NET. In each lesson, users must demonstrate their understanding of a security issue by exploiting a real vulnerability in the WebGoat applications. There are hints and 39 different lesson plans on various vulnerabilities and technologies. We won't cover all of them of course!

If you have a web application security topic you'd like to see - mention it in the discussion.